CVE Catalog
CVE-2026-20937
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.47%
38th percentile - higher than 38% of all known CVEs
Summary
An exposure of sensitive information vulnerability in Windows File Explorer allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential leakage of file data or metadata by an authorized user.
Recommendation
It is recommended to apply the latest security updates and monitor access to File Explorer.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.